They do seem to, most of the time. (As far as I know, the Mystery Gift passwords aren't hardcoded like they were in an earlier gen, so they're creating the passwords as they go.) But that also means they have some 'lazy' passwords, too. I think I remember passwords like [name of Pokemon][year of distribution], for example. :/